Blog
Insights for API governance and platform teams
Ideas and patterns for shipping APIs safely—lifecycle, gateway policy, workflows, developer portal, observability, and AI agent access—without vendor lock-in.
Written for platform, security, and integration leads who run Zerq on-prem, hybrid, or cloud.
Subscribe via RSSUpdated when we publish—no inbox required.
Articles
- API gateway high availability: what your replicas actually have to agree on
- api-gateway
- high-availability
- kubernetes
API gateway high availability is a coordination problem: shared rate limit state, workflow leader election, honest readiness probes, clean rolling updates.
Read article - API gateway wildcard routing: expose variable path depth without losing control
- api-gateway
- routing
- wildcard-proxy
How to set up API gateway wildcard routing in Zerq: scope a wildcard proxy, restrict methods, test allow and deny paths, and watch suffixes in request logs.
Read article - FAPI 2.0 and your API gateway: the security profile requirements that matter for open banking
- open-banking
- compliance
- security
FAPI 2.0 compliance at the API gateway layer: mTLS, per-TPP rate limits, and a complete audit trail. What each requirement means and how to enforce it in Zerq.
Read article - Validate API requests at the gateway before they reach your backends
- api-gateway
- workflows
- validation
How to use Zerq's workflow builder and validate node to enforce JSON Schema validation at the API gateway layer, before invalid requests reach your backends.
Read article - B2B partner API onboarding: from invite to first live call
- how-to
- developer-portal
- partners
B2B partner API onboarding in Zerq, step by step: configure clients, enable developer portal access, and walk partners from magic link to first live call.
Read article - Token exchange at the API gateway: translate partner OIDC tokens to backend JWTs without changing your services
- how-to
- security
- jwt
How to use Zerq's jwt_node to verify partner OIDC tokens, extract claims, and mint internal JWTs at the gateway layer. No code changes to backend services.
Read article - The shadow MCP server problem: when AI agents access APIs outside your gateway
- mcp
- ai-agents
- security
AI agents using shadow MCP servers bypass your API gateway's controls. Here's how to bring all MCP traffic under the same auth, rate limits, and audit trail.
Read article - Moving from WSO2 API Manager: what regulated teams need from their next gateway
- comparisons
- enterprise
- architecture
WSO2 API Manager's JVM component model creates compounding ops overhead. Here's what a WSO2 API Manager alternative needs for regulated enterprise teams.
Read article - API gateway batch processing with the loop node — per-item routing, validation, and error handling
- workflows
- how-to
- api-management
How to process batch API events at the gateway layer using the Zerq loop node — per-item routing, validation, error handling, and a full audit trail.
Read article